pull down to refresh

Can someone explain something? How does an iris scan prove you're human? Is it not possible to fake the data from an iris scan? Is it not possible for an AI to learn how to make such fakes? Is Worldcoin just selling itself as a trusted third party that issues "verified human" certificates? But underlying it all is just a trust me bro, right?